Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa
File:                     B2ED9AEE913311E79B98C45BC4F9AE02.roa (raw, json)
Hash identifier:          N9yj3pAAVs5m7SimFwaSce/DJ3a2aOwWL6WwhlLDDfs=
Subject key identifier:   CE:E8:E2:D5:B4:E0:EF:FA:CD:4B:0B:7A:CF:10:FB:2B:D4:00:9A:90
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       2531
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:53:32 +0000
ROA not before:           Fri 02 May 2025 16:23:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7500
IP address blocks:        202.12.27.0/24 maxlen: 24
                          2001:dc3::/32 maxlen: 32
                          2001:dc3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9521 (0x2531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:23:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a460fb-6dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:35:be:66:8d:f9:41:9b:da:22:27:53:92:
                    cc:ee:55:12:81:51:23:79:a9:d5:6b:65:cd:01:a3:
                    8c:97:60:b2:38:0e:1f:03:be:ed:51:3f:31:15:ba:
                    ce:a7:a8:ae:f2:42:43:d3:fc:f3:74:c3:a6:ca:3b:
                    32:de:85:7a:e9:b7:38:1e:7b:06:62:43:27:02:db:
                    b8:b9:c0:ac:d4:a0:41:2e:59:ee:03:60:4a:e3:ea:
                    40:8a:1c:8c:f0:38:76:52:d1:4e:5c:c9:03:e4:cf:
                    3a:a5:64:cd:b3:a3:e7:6c:17:57:5a:6a:f9:0d:29:
                    2b:ab:80:05:c4:2a:3e:e0:60:03:0e:93:f4:7b:52:
                    b1:f1:4d:1d:50:db:11:05:8a:2f:d7:92:fb:9b:15:
                    3a:6f:9f:fe:a7:34:b3:9b:a0:a6:b9:b7:dc:a3:47:
                    a3:ff:e9:0c:94:6b:a8:7a:f9:a8:6b:46:26:9c:71:
                    62:b0:2b:b6:8a:cf:fb:5d:20:06:5e:8d:20:ad:4f:
                    ef:df:7e:62:27:0f:0d:48:b9:b7:ac:be:a9:83:5b:
                    b7:97:a6:17:d9:3e:90:58:92:d8:60:52:87:b0:5b:
                    cb:29:f9:ef:30:08:53:6e:74:14:bc:12:28:af:b3:
                    59:db:61:d9:73:ff:d9:de:25:f0:0c:8f:97:6f:6a:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:E2:D5:B4:E0:EF:FA:CD:4B:0B:7A:CF:10:FB:2B:D4:00:9A:90
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.27.0/24
                IPv6:
                  2001:dc3::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:16:4e:ad:3f:96:cf:e8:01:d5:4a:74:8a:b3:15:6b:37:
         01:99:69:af:74:44:b2:89:aa:43:91:0a:63:5a:85:04:30:ba:
         78:81:3b:4e:cc:fc:25:20:b3:63:f8:d6:c1:31:09:22:64:42:
         30:ea:6d:f0:25:a2:d4:e0:69:1f:7c:a1:5b:14:ab:26:67:c5:
         9d:82:56:03:de:bc:dc:ba:5f:ed:f6:12:1e:e2:58:c2:27:63:
         8d:0d:1c:4f:86:c5:1e:20:ef:22:51:46:83:18:02:10:b5:73:
         7f:08:46:f0:55:3a:31:37:9c:ed:7b:6a:35:a9:ca:82:25:fd:
         27:60:46:6f:9d:4c:94:57:40:c5:29:af:17:35:90:da:4d:1c:
         d2:8f:fc:11:76:60:18:db:a0:4e:30:5c:57:af:1f:c5:01:26:
         f6:58:7d:e9:b2:64:58:11:98:e8:38:08:55:06:66:d8:70:22:
         97:4f:f1:c9:c6:57:19:b6:3b:24:a4:f5:20:b0:94:ea:c3:f9:
         de:33:db:97:87:51:f3:d2:99:12:4d:26:89:aa:59:78:50:e5:
         63:70:14:b1:cd:68:c7:10:09:fe:dc:2d:de:53:a6:27:c7:6e:
         58:4e:69:a7:41:80:bf:c1:8d:d7:96:b7:77:13:bb:fb:f5:76:
         1d:8a:e8:3f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICJTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG
MjYwQjM5RUUwHhcNMjUwNTAyMTYyMzI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjBmYi02ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPk1vmaN+UGb2iInU5LM7lUSgVEjeanVa2XNAaOMl2CyOA4fA77tUT8xFbrO
p6iu8kJD0/zzdMOmyjsy3oV66bc4HnsGYkMnAtu4ucCs1KBBLlnuA2BK4+pAihyM
8Dh2UtFOXMkD5M86pWTNs6PnbBdXWmr5DSkrq4AFxCo+4GADDpP0e1Kx8U0dUNsR
BYov15L7mxU6b5/+pzSzm6Cmubfco0ej/+kMlGuoevmoa0YmnHFisCu2is/7XSAG
Xo0grU/v335iJw8NSLm3rL6pg1u3l6YX2T6QWJLYYFKHsFvLKfnvMAhTbnQUvBIo
r7NZ22HZc//Z3iXwDI+Xb2qBXQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFM7o4tW0
4O/6zUsLes8Q+yvUAJqQMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG
MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP
ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI2QUEvNDZDN0YxNzI0RjE2MTFFNThEMkEzMzI3QzRGOUFFMDIvQjJFRDlBRUU5
MTMzMTFFNzlCOThDNDVCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAygwbMA0EAgACMAcDBQAgAQ3DMA0GCSqGSIb3DQEBCwUAA4IBAQAv
MhZOrT+Wz+gB1Up0irMVazcBmWmvdESyiapDkQpjWoUEMLp4gTtOzPwlILNj+NbB
MQkiZEIw6m3wJaLU4GkffKFbFKsmZ8WdglYD3rzcul/t9hIe4ljCJ2ONDRxPhsUe
IO8iUUaDGAIQtXN/CEbwVToxN5zte2o1qcqCJf0nYEZvnUyUV0DFKa8XNZDaTRzS
j/wRdmAY26BOMFxXrx/FASb2WH3psmRYEZjoOAhVBmbYcCKXT/HJxlcZtjskpPUg
sJTqw/neM9uXh1Hz0pkSTSaJqll4UOVjcBSxzWjHEAn+3C3eU6Ynx25YTmmnQYC/
wY3Xlrd3E7v79XYdiug/
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:44 2026 by rpki-client